Hi all, At customer site we've a HA set of 2x ASA5508-X with Firepower. The ASA has releases 9.8.3 (16) and FirePOWER 6.2.3.7 (51).The internet connection is a 100/100 Mbit connection. When we activate the SFR module (in service policy rules), th...
Forum Posts
Hello, I have a problem on Cisco Asa. Here are my config: object network PARTNER-NETOBJ subnet 10.175.0.0 255.255.0.0nat (PARTNER,outside) dynamic AAA.AAA.AAA.AAA object-group service PARTNER-SEROBJ service-object tcp destination eq www service...
Resolved! DDOS protection policy in ASA-FDM.
Hello Experts, We have a single ASA-5512 running firepower 6.2.3.x and I am currently using FDM to manage it. We have a threat license enabled. Can someone recommend how to setup policies for DOS/DDOS protection ? All i am looking to do is implem...
Resolved! FQDN Objects on FTD
Hi team, Is it possible to create network objects using FQDN in FTD? Based on this statement I don't think it's possible: "In ASA, a network object can contain a host, a network IP address, a range of IP addresses, or a fully qualified domain name ...
Has anybody configured the ASA's with DDNS to no-ip.com or any other DDNS vendor? I'm having a problem with the DDNS commands and there's no configuration guide on Cisco's website. The Command ref is a little lacking tooIf anybody has done this, a sa...
Hello All, We are planning to deploy 3 pair of Firepower NGFWv firewalls in Azure cloud, so I understand they can be managed only by FMC in On-Premise or in AWS cloud. My thought was can't these firewalls be managed locally & individually? I mean l...
Hi,I like to manage the FirePOWER Services using the ASDM but after I enable the FirwPOWER Services, then I reloaded the ASDM client. Once I reloaded the ASDM client, the Configuration Tab in the ASDM went grayed out but I can see the FirePOWER tab. ...
How much is protect license and why control license can not be verified? i discover IPS can not be applied without protect license and application level can not be used too
We have an ASA 5515 running 9.9(1) providing VPN connectivity only. Remote users are first authenticated via an external RSA service, then a secondary check to our own Microsoft DC's is performed to assign the correct Group-Policy through the use o...
Hi everyone, Hope you can help. I have been on this issue for 3 weeks with two diff Cisco tech support but have no progress. We just got this Firepower 5508-x with base license only back in a month ago. In short, right now, from the lan 192.168.0...
Resolved! How to use SourceFire Product License?
Hi, I have a SourceFire Product License like this. I don't know how to use it with the 5506W-X: Please help. Thank you! Product Name : ASA5506W-CTRL-LICProduct Description : Cisco ASA5506W-X Control LicenseProduct Qty ...
Hello Everyone, Does Cisco support NIC Teaming for Management interfaces on IPS Sensor 8350. Regards, Karthik
We're looking at replacing our older ASA 5505, and trying to decide what direction to go. We 100% need SSL VPN, so unfortunately the Meraki line is out as far as I can tell. So now looking at the ASAs (and which software image we'd run) vs the NGFW...
Hi. We have enabled FDM on our FTD sensor. On our effort to configure anyconnect, we cannot seem to be able to change the Anyconnect listening port from 443 to something else? Is this possible? Also i do not see any flexconfig on FDM, is there a way ...
I'm looking to set up a Firepower 2110 Threat Defense using the Firepower Device Manager GUI. I have a single outside interface set to the main ISP that all traffic is currently routing through, but also have a secondary outside interface for a seco...
